Commits on Aug 18, 2022

1. data/selinux: allow snaps to read certificates …

   This fixes an error occurring in our spread tests on Centos:
   
       2022-08-17T12:52:45.7861235Z type=AVC msg=audit(08/17/22 12:52:06.099:6583) : avc:  denied  { open } for  pid=71804 comm=snap path=/etc/pki/tls/openssl.cnf dev="sda2" ino=33578739 scontext=system_u:system_r:snappy_cli_t:s0 tcontext=system_u:object_r:cert_t:s0 tclass=file permissive=1
       2022-08-17T12:52:45.7898682Z type=AVC msg=audit(08/17/22 12:52:06.099:6583) : avc:  denied  { read } for  pid=71804 comm=snap name=openssl.cnf dev="sda2" ino=33578739 scontext=system_u:system_r:snappy_cli_t:s0 tcontext=system_u:object_r:cert_t:s0 tclass=file permissive=1
       2022-08-17T12:52:45.7899442Z type=AVC msg=audit(08/17/22 12:52:06.099:6583) : avc:  denied  { search } for  pid=71804 comm=snap name=pki dev="sda2" ino=50341665 scontext=system_u:system_r:snappy_cli_t:s0 tcontext=system_u:object_r:cert_t:s0 tclass=dir permissive=1
   
   Note that with this change we are not removing the call to
   
       miscfiles_read_all_certs(snappy_t)
   
   because it was actually present twice in this file.

   

   mardy committed Aug 18, 2022
   Configuration menu

   • View commit details
   • Copy full SHA for 3a542c1
   • Browse repository at this point

   Copy the full SHA

   3a542c1 View commit details

   Browse the repository at this point in the history